CFF Exam 10 -12

1.

2 points

Mounting a device on a computer running a foreign operating system has the advantage of permitting access to many operating system files that may contain cached or paged data that would normally be _____ when mounted under their native operating system.

Garbled.

Unacceptable evidence

Inaccessible.

None of the above.

2.

2 points

In which of the following settings is the intrinsic value standard most likely to be applied?

Local ownership of a national restaurant franchise.

Automobile repair shop.

Physician.

Computer programmer

3.

2 points

Deleted files may be made unrecoverable by overwriting them with data by anti-forensic programs that are used to securely wipe files and storage devices. Such programs can securely wipe files by overwriting free storage space ______ with zeroes and ones.

Once

Two times.

Three times

Many times

4.

2 points

In which of the following roles is the practitioner not permitted to serve in bankruptcy proceedings?

Consultant

Trustee

Examiner

The practitioner is permitted to serve in all of the above roles.

5.

2 points

Debtor-creditor schemes are most likely to occur in cases of _______.

The debtor having been barred from filing for bankruptcy

The creditor having recently acquired a new company.

The debtor having recently acquired a new company.

None of the above.

6.

2 points

The US National Institute of Standards and Technology Special Publication 800-86 defines _____ phases for the forensic process.

Two

Three

Four

None of the above.

7.

2 points

In large law enforcement agencies, the computer forensic examiner is the person who _____.

Works hands-on with computer devices and networks to collect digital evidence.

Organizes and interprets digital evidence, provides reports for attorneys, and testify s in court.

Supervises the entire investigation.

None of the above.

8.

2 points

Once files are deleted from the trash bin, they are _____.

Not recoverable

Likely recoverable shortly after their being deleted from the trash bin.

Recoverable under most circumstances without special computer forensic tools.

Recoverable under most circumstances with special computer forensic tools.

9.

2 points

In a computer forensics investigation, chain of custody is the responsibility of _______.

The practitioner.

The attorney

Employees of the client whose interest the practitioner serves

None of the above.

10.

2 points

Network forensics is _______.

An area within digital forensics

An area within computer forensics

An area outside of both digital forensics and computer forensics.

None of the above.

11.

2 points

Once the power is off, the computer or storage device should be _____.

Removed from the computer and then cloned.

Kept in the computer and then cloned.

Cloned and then removed from the computer.

None of the above.

12.

2 points

Fraud auditor's are likely to use ________.

CATS

CAAT's

CASTS

None of the above.

13.

2 points

In business bankruptcies, audited financial reports _______.

Are reliable sources of information in identifying assets subject to bankruptcy proceedings

Are not reliable sources of information in identifying assets subject to bankruptcy proceedings.

Are reliable sources of information in identifying assets subject to bankruptcy proceedings, if such reports are available for three-year period leading up to bankruptcy.

Are a reliable source of information in identifying assets subject to bankruptcy proceedings, except in involuntary filings.

14.

2 points

In divorce, state law _____

Always takes precedence over federal law.

Usually takes precedence over federal law

Never takes precedence over federal law.

Does not take precedence over federal law, except in the area of pension and certain other retirement assets.

15.

2 points

Secretly transferring assets and selling assets below market value refers to _______.

A fraudulent conveyance.

A filing scheme.

Undocumented transfers.

None of the above.

16.

2 points

With respect to computer forensic investigations and including opinions and conclusions in the practitioner's report, the practitioner ______

Should carefully detail all opinions and conclusions.

Should carefully detail only conclusions.

Should not detail opinions and conclusions

Should only detail those opinions and conclusions that are clearly consistent with the evidence gathered by the practitioner.

17.

2 points

Putting together pieces of deleted files is called _______.

Registry filtering

Registry extraction

Registry assembly

None of the above.

18.

2 points

If a consumer debtor's current median income (adjusted for certain IRS-allowed deductions) exceeds specific maximum-income thresholds, ______ may request that the case be dismissed.

Only the trustee

Only the creditors

Only the court

Any party of interest

19.

2 points

Debt secured by an asset and considered a marital asset in a non-community state will be divided ______.

Equally

According to the proportion of assets that are divided

According to the distribution of the asset that is used for the security of the debt.

According to a plan drawn up by a disinterested party.

20.

2 points

A VPN may be used to hide a person's _____.

IP address

Web address

E-mail address

None of the above.

21.

2 points

Which of the following is not an objective of computer forensics?

Identifying perpetrators or other individuals of interest.

Locating and recovering data, files, and e-mail.

Determining guilt in computer crimes.

All of the above are objectives of computer forensics.

22.

2 points

The computer forensics examiner may remove an entire computer from a crime scene and take it to a forensics lab. This approach involves ______.

Live acquisition

Static acquisition

Network acquisition

None of the above.

23.

2 points

All of the following are true about arbitration in a marital setting except?

Arbitration can be binding

Arbitration can be nonbinding

Most arbitration is nonbinding

Most arbitration cannot be appealed.

24.

2 points

FINCEN is useful in _______ investigations.

Terrorist

Money laundering

Both terrorist and money laundering

None of the above

25.

2 points

Individual debtors who cannot pass a means test must file under ______.

Chapter 13 instead of chapter 7

Chapter 7 instead of chapter 11

Chapter 13 instead of chapter 11

None of the above

26.

2 points

Withholding documents related to the debtor's property or financial affairs from the standing trustee or other officer of the court is an example of ______.

A discovery violation

A violation of the Sarbanes Oxley act of 2002.

Fraud

None of the above.

27.

2 points

Generally speaking, if the practitioner provides bankruptcy services in some other role besides that of a consultant, ______.

CS section 100 applies

CS section 100 applies to roles other than the trustee

CS section 100 never applies

CS section 100 applies in some districts.

28.

2 points

The valuation date in a divorce engagement can be any of the following except ______.

Date of seperation

Date of trial

Date of marriage

All of the above dates are dates on which assets can be valued in a divorce setting.

29.

2 points

Encrypted data on a hard drive _____.

Can always be decrypted using a commercial grade forensic tool kit.

May be permanently out of reach for the practitioner.

May be unlocked by contacting the vendor of the encrypting software.

None of the above.

30.

2 points

Which of the following schedules and statements is not typically included with a bankruptcy filing?

Statement of financial affairs.

Creditors holding standard unsecured claims

Co-debtor.

All of the above are normally included.

31.

2 points

Which of the following situations does not involve concealed-assets fraud?

Divorces.

Partnership dissolutions

Estates.

All of the above involve concealed-asset frauds

32.

2 points

IAFIS is an FBI system for looking up _______.

DNA

Handwriting

Fingerprints

All of the above

33.

2 points

When working with a cloned copy of a hard drive, the practitioner should ______.

Not boot the cloned copy because booting it can cause changes to the data.

Boot the cloned copy.

Not transport the cloned copy without securing its chain of custody.

None of the above.

34.

2 points

Rule 2004 of the Federal Bankruptcy code permits _____ to obtain a court order to examine any entity involved with the case.

The trustee only.

Creditors only.

The court only.

Any party in interest.

35.

2 points

Denial of service attacks may be against _______.

Individual websites

Domain name servers

Either A or B

None of the above.

36.

2 points

Means testing individuals is a central part of the most recent bankruptcy laws and has made it more difficult for individuals to have their debts ______.

Totally dismissed.

Subjected to a payment plan.

Exempt from an IRS review

None of the above

37.

2 points

A court order has been issued to divide retirement benefits in the divorce action of Pam and Jerry. The court order has not yet been approved by the trustee of the retirement plan. The court order, at this time, is a ______.

Qualified domestic relations order.

Domestic relations order.

Decree

Benefit separation order.

38.

2 points

The first action with respect to a computer device is _______.

Clone the storage device (for example, the hard drive)

Power it down.

Perform an online look-up of its security features.

None of the above.

39.

2 points

Computers store files in disk clusters but generally don't put two files in the same cluster. This leads to ______.

Unallocated space

Free space

Slack space

None of the above.

40.

2 points

Fraud auditors are concerned with ______.

Inquiry instead of interviewing

Confirmation instead of alternative sources.

Observation versus surveillance.

None of the above.

41.

2 points

The bankruptcy law requires _____ to investigate the client's filing.

Practitioners

Attorneys

The bankruptcy magistrate

None of the above.

42.

2 points

If an equalization note does not have a stated interest rate ______.

A rate must be imputed.

A rate need not be imputed for equalization notes used in divorce actions

A rate must be imputed only if the rate is below the market rate at the time the note was created.

A rate must be imputed if the due date of the note is unreasonable.

43.

2 points

A common issue for the practitioner is locating the origin of an individual or device that has communicated in some way over the internet. This is normally accomplished by identifying the location of the internet protocol (IP) address that is hidden inside each _____ on the internet.

Web page

E-mail message sent.

Web page and e-mail message

None of the above.

44.

2 points

Which of the following is not a traditional are for LCN?

Loansharking

Labor racketeering

Gambling

All of the above are traditional ares for the LCN.

45.

2 points

Which of the following debts may be discharged in bankruptcy.

Federal student loans.

Tax debt older than five years.

Domestic support obligations.

None of the above may be discharged.

46.

2 points

Wear leveling applies to ______.

Hard drives

Solid state drives

Both hard and solid state drives

Neither hard drives nor solid state drives.

47.

2 points

Depleted pension funds, would most likely be associated with ______.

A bust-out scheme.

A bleed-out scheme.

A debtor-creditor collusive scheme.

None of the above.

48.

2 points

When the target is a sophisticated user, IP tracing ______.

Is a sure fire way to trace the persons's internet communications.

Is a possible way to trace the person's internet communications.

Is not applicable to tracing communications over the internet.

None of the above are correct statements.

49.

2 points

Terrorism represents ______.

A special type of organized crime

An organization that engages in reverse money laundering

Both A & B

Neither A nor B

50.

2 points

Before a practitioner accepts a matrimonial forensics engagement he or she considers whether he or she?

Can be objective

Is competent in the area of matrimonial forensics.

Is a good communicator

All of the above.